Spengler: False Boundaries and Arbitrary Code Execution

Indeed so. This sort of analysis is tedious, boring, and error-prone, so it's good that Brad both did it and solicited comments so he could fix any problems later. Everyone knows that the set of capabilities is irregular and more than slightly badly thought out, but no detailed data was available before now. Figuring out just *what* is wrong with them is the first step to fixing them (hopefully before too many people come to rely on the current set).